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(57) Abstract: The present invention discloses a method and system for maintaining privacy for transactions performable by a user 
device having a security module with a privacy cerdfication authority and a verifier. The system comprises an issuer providing 
an issuer public key PKI; a user device having a security module for generating a first set of attestation-signature values DAAl; a 
privacy certification authority computer for providing an authority public key PKPCA and issuing second attestation values AV2; 
and a verification computer for checking the validity of the first set of attestation-signature values DAAl with the issuer public key 
PKI and the validity of a second set of attestation-signature values DAA2 with the authority public key PKPCA, the second set 
of auestation-signature values DAA2 being derivable by the user device 20 from the second attestation values AV2, wherein it is 
verifiable that the two sets of attestation-signamre values DAAl, DAA2 relate to the user device. 
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